This vulnerability in modelscope agentscope (up to version 1.0.18) allows an attacker to perform server-side request forgery via manipulation of the _get_bytes_from_web_url function. SSRF vulnerabilities enable attackers to make the server perform unintended requests, potentially accessing internal resources or services. The issue affects the Internal Service component and can be triggered remotely without any privileges or user interaction. The CVSS 4.0 base score is 6.9, indicating a medium severity level. No official fix or patch has been provided by the vendor, and the exploit is publicly available.

Successful exploitation of this SSRF vulnerability could allow an attacker to make arbitrary requests from the vulnerable server, potentially accessing internal or protected resources. The vulnerability does not require authentication or user interaction, increasing its risk. However, the CVSS score and description indicate limited impact on confidentiality, integrity, and availability (low to limited impact). There is no evidence of active exploitation in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded and no official patch is available, users should consider implementing network-level protections such as restricting outbound requests from the affected service to trusted destinations only. Monitoring for unusual outbound requests may help detect exploitation attempts. Avoid exposing the vulnerable service to untrusted networks until a fix is available.